security

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

security {
    authentication-key-chains {
        key-chain key-chain-name {
            key key {
                secret secret-data;
                start-time yyyy-mm-dd.hh:mm:ss;
            }
        }
    certificates {
        cache-size bytes;
        cache-timeout-negative seconds; 
        certification-authority ca-profile-name {
            ca-name ca-identity;
            crl file-name;
            encoding (binary | pem);
            enrollment-url url-name;
            file certificate-filename;
            ldap-url url-name;
        }
        enrollment-retry attempts;
        local certificate-filename {
            certificate-key-string;
            load-key-file key-file-name;
        }
        maximum-certificates number;
        path-length certificate-path-length; 
    }
    ssh-known-hosts {
        host {
            fetch-from-server host-name;
            load-key-file file-name;
        }
    }
    traceoptions {
        file filename <files number> <size size>;
        flag flag;
        level level;
        no-remote-trace
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit]

Description

Configure security services. Most of the configuration statements do not have default values. If you do not specify an identifier for a statement that does not have a default value, you cannot commit the configuration.

Options

Required Privilege Level

Release Information

Statement introduced in Junos OS Release 11.1.

arrow_backward PREVIOUS securid-server

NEXT arrow_forward security-association (MACSec)

Junos CLI Reference

ON THIS PAGE